$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/894d604d-4003-3744-858c-fd7bf4addcb6.roa File: 894d604d-4003-3744-858c-fd7bf4addcb6.roa (raw, json) Hash identifier: 3ZgVp6VwbVdyQbz2PDj2XSpdDxGd2xLLvZ1achiXs3E= Subject key identifier: 12:B5:F4:BC:EB:6A:00:64:5B:0F:54:BE:69:7C:1B:26:0B:FC:95:15 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F497390141CEEBD0BC46057C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/894d604d-4003-3744-858c-fd7bf4addcb6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36621 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:90:14:1c:ee:bd:0b:c4:60:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=60683920-66dc-4f20-8f4e-3689912603c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1c:81:fb:1f:21:16:71:02:c4:d1:05:1d:b6: 31:a5:a0:23:37:3b:3a:87:07:af:2b:c7:70:c5:d8: a2:20:af:50:3c:a3:43:1c:40:71:5d:35:0f:17:02: ef:bf:81:3f:e9:f6:49:04:8f:55:9c:eb:8c:39:45: 59:a6:46:ec:81:fc:c5:9b:48:6f:7c:c5:73:73:7b: 2d:b7:b2:09:02:84:fe:10:e9:1a:21:59:e2:f2:77: 3a:77:8c:f5:d4:3c:0e:0f:5f:d4:cd:55:7a:62:be: 00:2f:76:3b:e4:82:0d:54:14:59:2f:3e:97:de:02: ef:7b:fc:1f:56:67:a0:29:74:4d:04:c4:dc:d7:7a: 22:71:ed:87:0b:2d:4e:a4:29:fd:0f:3c:97:87:80: bd:75:db:5e:11:e8:26:93:f5:a1:26:76:e0:21:6b: 3d:ce:ee:49:dc:fd:b0:f7:9f:b8:82:bc:b3:63:61: 04:9f:a8:93:78:cf:1d:dd:1d:3c:4f:79:33:fb:d8: cc:22:ea:c1:67:ac:6a:ec:6c:7d:b9:95:a8:02:9c: 30:e6:72:93:16:86:35:71:b3:31:00:64:28:69:c9: 36:6b:4f:53:27:50:84:63:20:d8:28:75:d8:eb:f4: 8a:c1:c9:49:31:45:24:f1:97:44:81:63:fd:cf:4e: 98:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B5:F4:BC:EB:6A:00:64:5B:0F:54:BE:69:7C:1B:26:0B:FC:95:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/894d604d-4003-3744-858c-fd7bf4addcb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:9a:ef:99:58:fe:94:b8:d8:78:b3:3f:d4:71:34:bc:04:66: d8:bd:f2:56:35:3d:cc:ad:e2:d9:5e:35:5a:66:a2:49:aa:0b: 8b:97:f6:a6:cc:7b:4a:91:9d:ca:ab:ef:f2:63:53:2e:d8:42: 72:fd:d1:55:b8:e5:cf:85:ad:d6:42:67:ab:b5:50:01:5c:e5: 57:69:c3:9a:da:75:6c:c6:84:e4:31:66:6e:f3:e7:bc:0f:b2: e1:4f:d2:7a:ed:20:c1:de:ba:8c:a2:e2:f3:1b:49:c3:63:9d: 81:90:ad:7b:16:94:a0:5f:34:3c:1d:44:a2:4d:35:91:35:d3: e7:04:7a:7f:18:63:5e:50:0d:c9:5c:21:c2:e5:71:a2:1d:f6: 51:35:6c:ee:53:35:7d:1a:18:29:2c:e4:84:ea:82:4c:17:25: 0f:d7:d9:3e:28:3c:4d:79:d3:45:5a:f0:12:4e:2c:0b:a8:51: a1:a9:88:97:46:9a:25:42:98:8d:f1:3b:1c:61:e4:da:72:53: d8:e6:f4:57:78:02:62:85:5c:01:e7:77:a2:03:fd:db:49:8a: db:04:27:6c:f1:16:9e:55:6f:20:32:1a:00:e9:94:32:14:25: 14:2b:8c:3d:0d:21:0d:d7:e2:4f:75:3c:b1:3e:63:d9:55:fe: 14:8a:4c:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc5AUHO69C8RgV8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjA2ODM5MjAtNjZkYy00ZjIwLThmNGUtMzY4OTkxMjYwM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnByB+x8hFnECxNEFHbYxpaAjNzs6hwevK8dw xdiiIK9QPKNDHEBxXTUPFwLvv4E/6fZJBI9VnOuMOUVZpkbsgfzFm0hvfMVzc3st t7IJAoT+EOkaIVni8nc6d4z11DwOD1/UzVV6Yr4AL3Y75IINVBRZLz6X3gLve/wf VmegKXRNBMTc13oice2HCy1OpCn9DzyXh4C9ddteEegmk/WhJnbgIWs9zu5J3P2w 95+4gryzY2EEn6iTeM8d3R08T3kz+9jMIurBZ6xq7Gx9uZWoApww5nKTFoY1cbMx AGQoack2a09TJ1CEYyDYKHXY6/SKwclJMUUk8ZdEgWP9z06YAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBK19LzragBkWw9Uvml8GyYL/JUVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODk0ZDYwNGQtNDAwMy0z NzQ0LTg1OGMtZmQ3YmY0YWRkY2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADya75lY/pS42HizP9RxNLwEZti98lY1Pcyt4tleNVpmokmqC4uX9qbM e0qRncqr7/JjUy7YQnL90VW45c+FrdZCZ6u1UAFc5Vdpw5radWzGhOQxZm7z57wP suFP0nrtIMHeuoyi4vMbScNjnYGQrXsWlKBfNDwdRKJNNZE10+cEen8YY15QDclc IcLlcaId9lE1bO5TNX0aGCks5ITqgkwXJQ/X2T4oPE1500Va8BJOLAuoUaGpiJdG miVCmI3xOxxh5NpyU9jm9Fd4AmKFXAHnd6ID/dtJitsEJ2zxFp5VbyAyGgDplDIU JRQrjD0NIQ3X4k91PLE+Y9lV/hSKTEE= -----END CERTIFICATE-----Generated at Fri Sep 25 23:38:42 2026 by rpki-client